USN-3148-1: Ghostscript vulnerabilities

Ubuntu Security Notice USN-3148-1

1st December, 2016

ghostscript vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10



• Ubuntu 16.04 LTS



• Ubuntu 14.04 LTS



• Ubuntu 12.04 LTS

Summary

Ghostscript could be made to crash, run programs, or disclose sensitive
information if it processed a specially crafted file.

Software description

• ghostscript
  - PostScript and PDF interpreter
  
  

Details

Tavis Ormandy discovered multiple vulnerabilities in the way that Ghostscript
processes certain Postscript files. If a user or automated system were tricked
into opening a specially crafted file, an attacker could cause a denial of
service or possibly execute arbitrary code. (,
)

Multiple vulnerabilities were discovered in Ghostscript related to information
disclosure. If a user or automated system were tricked into opening a specially
crafted file, an attacker could expose sensitive data. ()

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.10:

Ubuntu 16.04 LTS:

Ubuntu 14.04 LTS:

Ubuntu 12.04 LTS:

To update your system, please follow these instructions:
,

,

,

CVE-2016-8602